Chrome CVE-2026-125350: Google says exploit exists in the wild — update now

Google says an exploit for Chrome CVE-2026-125350 exists in the wild. Practical guidance: update Chrome now.

Technology news, troubleshooting guidance, cybersecurity explainers, and small-business IT advice from The IT Guys.

Google says an exploit for Chrome CVE-2026-125350 exists in the wild. Practical guidance: update Chrome now.

CISA added two flaws to KEV on November 9, 2026. GPUStack names 2.2.0 as patched. IBM names Faspex 5.0.19 PL1.

Monday’s five-story technology recap covers Anthropic’s Fable and Mythos 5.2, ChatGPT Enterprise in AWS Marketplace, Adobe and Disney’s AI alliance, an AI-assisted seabed robot test, and a Databricks access-mode change.

Waseda says an unauthorized third party obtained 3,342 MyWaseda-related records; the figure counts records, not unique people, and the intrusion route remains under investigation.

York University says an unauthorized actor stole personal information from limited departmental webforms; York says affected information varies by person and most stolen information was basic identification and contact information.

LNbits told all users to stop their LNbits servers immediately while it prepares security patches; no incident-specific patched release or restart clearance was visible at the reporting cutoff.

Sunday’s five-story technology recap covers environmental groups’ AI tradeoffs, scientific-model research, OpenAI security testing, TSMC’s reported memory-chip plans, and a wet-lab AI benchmark.

CVE-2026-123966 affects Tenda AC19 firmware 16.03.10.07. Version 16.03.10.11 is higher-numbered, but its captured vendor notes do not confirm it as the fix.

Tensorlake says an attacker used vendor-hosted engineering sandboxes to reach GitHub repositories and probe Actions secrets; customers are asked to rotate API keys as a precaution.

Microsoft rates CVE-2026-109469 at CVSS 10.0 but says the Entra hosted service is fully mitigated and customers have no action to take.